SC-100 · Question #163
You have an operational model based on the Microsoft Cloud Adoption Framework for Azure. You need to recommend a solution that focuses on cloud-centric control areas to protect resources such as…
The correct answer is D. security baselines in the Microsoft Cloud Security Benchmark. The Microsoft Cloud Security Benchmark (MCSB) provides security baselines-prescriptive, cloud-centric configurations-for a wide range of Azure resource types including endpoints (VMs), databases (Azure SQL, Cosmos DB), files (Azure Files), and storage accounts. These baselines…
Question
You have an operational model based on the Microsoft Cloud Adoption Framework for Azure. You need to recommend a solution that focuses on cloud-centric control areas to protect resources such as endpoints, databases, files, and storage accounts. What should you include in the recommendation?
Options
- Abusiness resilience
- Bmodem access control
- Cnetwork isolation
- Dsecurity baselines in the Microsoft Cloud Security Benchmark
How the community answered
(24 responses)- A13% (3)
- B8% (2)
- C4% (1)
- D75% (18)
Explanation
The Microsoft Cloud Security Benchmark (MCSB) provides security baselines-prescriptive, cloud-centric configurations-for a wide range of Azure resource types including endpoints (VMs), databases (Azure SQL, Cosmos DB), files (Azure Files), and storage accounts. These baselines are the direct mapping of the 'security baselines' control area in the Microsoft Cloud Adoption Framework operational model. Defender for Cloud surfaces these baselines and tracks compliance against them. Business resilience (A) focuses on availability and continuity, not security controls for specific resource types. Modern access control (B) addresses identity and access management, not resource-level security configurations. Network isolation (C) is one specific control area covering segmentation, not the broad set of controls covering endpoints, databases, files, and storage.
Topics
Community Discussion
No community discussion yet for this question.